2e7a6a3bd50c3f3e447105bd0aa838f9

Sharing

Copy URL Twitter E-mail

General

Target

2e7a6a3bd50c3f3e447105bd0aa838f9
Size

268KB
MD5

2e7a6a3bd50c3f3e447105bd0aa838f9
SHA1

c506de937d5717ace3a78eb1b3479f42a5a1c3cd
SHA256

8634b527f0d0e3b4707520d86c0d5ef7891dc857ae43fe58f58383ecf137a63f
SHA512

b663cb1886bb86c2c5217a6f0456067cbfd2db091bd730896bca29a5ec1970c8d39be7ed2011f57346086d33427d82b85baa865778ee8b268889067921fe5679
SSDEEP

6144:GcW4I8upYtBkpbZ+REUraC6ShGOmKpEMEA+G:GUI9WBS+DrflGOmUh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e7a6a3bd50c3f3e447105bd0aa838f9

Files

2e7a6a3bd50c3f3e447105bd0aa838f9
.dll windows:4 windows x86 arch:x86

c8e74a361b67e0efbb5444454d69c263

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

SetCapture

comctl32

ImageList_Create
ImageList_GetBkColor
ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Draw
ImageList_Add

advapi32

RegCreateKeyExA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA

shlwapi

PathIsDirectoryA
PathIsContentTypeA
SHQueryValueExA
SHEnumValueA
SHSetValueA
SHDeleteValueA
SHGetValueA
SHStrDupA
SHQueryInfoKeyA

gdi32

RestoreDC
SelectPalette
BitBlt
GetPixel
GetDCOrgEx
GetDIBColorTable

kernel32

VirtualAlloc
GetModuleHandleW
ExitProcess
LoadLibraryExA
SetErrorMode
SetFilePointer
ExitThread
GetLastError
ResetEvent
GetProcAddress
ReadFile
SetEndOfFile
GetModuleHandleA
GetOEMCP
SetEvent
IsBadReadPtr
GetACP
SetHandleCount

shell32

SHGetFileInfoA
SHGetDiskFreeSpaceA
SHFileOperationA
DragQueryFileA
SHGetSpecialFolderLocation

Sections

CODE
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 4KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8e74a361b67e0efbb5444454d69c263

Headers

File Characteristics

Imports

version

user32

comctl32

advapi32

shlwapi

gdi32

kernel32

shell32

Sections

CODE Size: 60KB - Virtual size: 57KB

.rdata Size: 4KB - Virtual size: 875B

.data Size: 172KB - Virtual size: 169KB

.hdata Size: 4KB - Virtual size: 65KB

DATA Size: 12KB - Virtual size: 8KB

.adata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 772B

.reloc Size: 4KB - Virtual size: 1KB

CODE
Size: 60KB - Virtual size: 57KB

.rdata
Size: 4KB - Virtual size: 875B

.data
Size: 172KB - Virtual size: 169KB

.hdata
Size: 4KB - Virtual size: 65KB

DATA
Size: 12KB - Virtual size: 8KB

.adata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 772B

.reloc
Size: 4KB - Virtual size: 1KB